chore: Add PR's requested changes on Security concerns

Author: matiasperrone-exo

app/Http/Controllers/OAuth2/OAuth2ProviderController.php

@@ -305,7 +305,7 @@ public function token()
         summary: 'OAuth2 Token Revocation Endpoint',
         description: 'Revokes an access token or refresh token per RFC 7009. The endpoint is idempotent — revoking a non-existent token returns success.',
         tags: ['OAuth2 / OpenID Connect'],
-        security: [['OAuth2ProviderSecurity' => []]],
+        security: [['OAuth2ProviderClientBasic' => []], ['OAuth2ProviderSecurity' => []]],
         requestBody: new OA\RequestBody(
             description: 'Token revocation parameters',
             required: true,
@@ -355,7 +355,7 @@ public function revoke()
         summary: 'OAuth2 Token Introspection Endpoint',
         description: 'Validates and returns metadata about an access token per RFC 7662. Returns detailed information about the token including associated user data.',
         tags: ['OAuth2 / OpenID Connect'],
-        security: [['OAuth2ProviderSecurity' => []]],
+        security: [['OAuth2ProviderClientBasic' => []], ['OAuth2ProviderSecurity' => []]],
         requestBody: new OA\RequestBody(
             description: 'Token introspection parameters',
             required: true,

app/Swagger/Security/OAuth2ProviderControllerSecuritySchema.php

@@ -16,6 +16,12 @@
         ),
     ]
 )]
+#[OA\SecurityScheme(
+    securityScheme: 'OAuth2ProviderClientBasic',
+    type: 'http',
+    scheme: 'basic',
+    description: 'HTTP Basic authentication with OAuth2 client_id:client_secret (RFC 6749 §2.3.1).'
+)]
 class OAuth2ProviderControllerSecuritySchema
 {
 }